The vendor’s NVSentinel platform contains a flaw in the platform‑connectors component. A gRPC health‑event interface, exposed over a world‑writable Unix domain socket, does not perform authentication. An attacker can issue health‑event requests from a local context without permission, potentially causing the service to become unresponsive or crash, which results in denial of service to legitimate users.

NVIDIA NVSentinel for Linux is affected, specifically the platform‑connectors component. No specific affected version range is listed, so any installation of NVSentinel that includes the unpatched platform‑connectors function may be vulnerable.

The CVSS score is 6.0, indicating a medium severity. EPSS data is unavailable, but the lack of authentication on a world‑writable socket means an exploit can be carried out by any local user with write access, lowering the technical barrier to attack. The vulnerability is not included in the CISA KEV catalog, suggesting it is not currently widely exploited, but the ease of exploitation makes it a credible local threat.